NARRATIVE: Colonel Koziura — The SBU Traitor Sentenced to Life After a Ghost Operation

NARRATIVE: Colonel Koziura — The SBU Traitor Sentenced to Life After a Ghost Operation

Introduction: a betrayal from within, in the depths of the war

The man sentenced to life on June 25, 2026

On June 25, 2026, the Shevchenkivskyi District Court of Kyiv delivered its verdict in one of the most serious espionage cases of the war: Colonel Dmytro Koziura, former head of the counter-terrorism department at the Security Service of Ukraine (SBU), sentenced to life in prison for treason. Prosecutor General Ruslan Kravchenko himself announced the conviction, declaring: "Anyone who wore Ukrainian shoulder straps and began working for the FSB becomes an enemy of Ukraine."

This is not the story of a desk officer who copied documents through negligence. It is the story of a senior officer recruited in Vienna in 2018 by the Russian Federal Security Service (FSB), who became an active agent in 2022, and who passed classified information on Ukrainian critical infrastructure, air defenses, SBU unit locations, and personal data on Ukraine's military and political leadership for years. And who was caught by his own institution in an operation that deserves to be told.

Operation "Rat" — a remarkably sophisticated counter-intelligence effort

The clandestine operation codenamed "Rat" by the SBU is the heart of this narrative. Rather than immediately arresting Koziura once his treason was detected, the SBU conducted a long clandestine investigation. During this period the double agent continued operating, unaware that he was under surveillance and that his contacts with his Russian handlers were being documented. More than that: the SBU used his access to the FSB to flood the Russian services with what it describes as a "massive quantity of disinformation." The Russians believed they were receiving valuable intelligence from their agent — they were in fact receiving carefully constructed information designed to lead them astray.

Koziura was finally detained in February 2025. Telecommunications devices and material evidence of his collaboration with the FSB were transmitted to the prosecution. The life sentence, pronounced under Ukrainian laws on treason under martial law, is the conclusion of a process that lasted years and illustrates the sophistication of Ukrainian counter-intelligence capabilities.

The Vienna recruitment — a story of corruption under diplomatic cover

Vienna, capital of intelligence

Vienna has been, since the Cold War, one of the world's spy capitals. Its Austrian neutrality, its international institutions and its diplomatic tradition have made it a prime playing field for the intelligence services of all nations. The Russian FSB maintains an active and sophisticated presence there. It was in this city that Koziura was approached and recruited in 2018, well before the full-scale invasion of 2022.

This recruitment in 2018 — four years before the start of total war — reveals that Russian services methodically planned their penetration of Ukrainian security structures well ahead of the invasion. Koziura was not an opportunist who decided to betray in the urgency of war — he had been placed as a sleeper agent in a key position, waiting for the moment when his access would become most valuable. That moment arrived in 2022.

The value of his information to Moscow

What exactly was Koziura transmitting to the FSB? The prosecutor general's dossier is eloquent: data on critical infrastructure (including the Ukrainian gas transport system), consequences of Russian missile strikes on Kyiv (allowing assessment of attack effectiveness and target adjustment), SBU unit locations, air defense plans for specific installations, personal information on Ukraine's military and political leadership.

That list is staggering. A head of the SBU counter-terrorism department has access to information that, in Russian hands, can directly cost lives — by allowing strikes to be refined, defenses to be circumvented, individuals to be targeted. The monetary reward he received from his Russian handlers — cited in the prosecutor's declarations — literally represents a price tag on Ukrainian lives.

Counter-terrorism and treason — the irony of the function

The paradox of the anti-terrorism chief turned spy

Koziura was not a low-ranking agent. He led the SBU's counter-terrorism department — the structure charged precisely with detecting and neutralizing threats from within, including foreign agents infiltrated into Ukrainian structures. In other words, he was theoretically one of the first lines of defense against exactly the type of agent he had himself become. That tragic irony illustrates a fundamental truth of intelligence: counter-espionage structures are prime targets for adversary services.

The fact that he could operate for so long without being detected — or at least without being immediately arrested — raises legitimate questions about the SBU's internal control mechanisms. Those questions are not new: since 2022, several cases of Russian agents infiltrated into the SBU have been made public. The organization has undertaken internal purges and reforms to strengthen its detection systems. Koziura's conviction is both proof that these systems eventually work and a reminder that they have their limits.

The SBU confronting its own demons

The Ukrainian SBU is an heir of the Soviet KGB — with all that implies in institutional culture, methods and networks of connections that did not all disappear with the collapse of the USSR. Deprogramming that past is a long and difficult process. Since 2022, SBU chief Vasyl Maliuk has undertaken a modernization of the organization, replacing figures whose loyalty was in doubt.

The Koziura case arrives in this context of difficult transformation. It illustrates that the work of purification is not complete — but it also demonstrates that the SBU is capable of conducting sophisticated counter-intelligence operations, such as Operation "Rat," which turned the situation to Ukraine's advantage.

Massive disinformation as a counter-measure — the genius of Operation Rat

Using the traitor against his principal

The most remarkable decision in managing the Koziura case was to use his communication channel with the FSB to inject massive disinformation. This classic counter-intelligence technique — turning a detected agent into a disinformation channel before arrest — was applied successfully. The FSB believed it was receiving valuable intelligence from its agent embedded at the heart of the SBU. It was receiving carefully constructed information designed to mislead it.

The concrete impact of this disinformation on Russian operations is not publicly disclosed — and should not be. But the logic is clear: during the period when Koziura was transmitting disinformation, Russian forces acting on the basis of that information could make wrong decisions — sending missiles to incorrect targets, positioning forces based on a deliberately falsified picture of the Ukrainian situation.

The Ukrainian counter-intelligence model

Operation "Rat" fits into a broader pattern of Ukrainian counter-intelligence sophistication. In June 2026, Ukraine arrested eight people accused of cheering on Russian strikes from inside the country and spying, according to data published by Euromaidan Press on June 23. These arrests show that surveillance and detection of Russian agents in Ukraine is an ongoing operation that produces regular results.

This internal intelligence work is essential to Ukraine's survival. A country at war must be able to protect its own institutions and leadership against enemy penetration. Koziura's conviction and the regular arrests of Russian agents demonstrate that, despite its historical challenges, the SBU is fulfilling this mission with increasing effectiveness.

The life sentence — justice, deterrence, symbol

The severity of the sentence as a message

The life sentence handed down against Koziura is not only an individual punishment — it is a political and judicial message addressed to the entire Ukrainian security services personnel. Prosecutor General Kravchenko said so explicitly: "The only appropriate sentence for such individuals is the most severe." In a Ukraine under martial law, where betrayal can directly cost lives, that severity is consistent with the legal framework and the reality of the conflict.

It is also a deterrence signal: any security services official tempted by an FSB approach must know that the sanction will be maximum and inevitable. In an environment where Russian services spend considerable resources recruiting agents in Ukrainian structures, that deterrence has real strategic value.

Martial law and wartime justice

Koziura's conviction was pronounced under the specific provisions of treason under Ukrainian martial law — provisions that provide for harsher sentences than the normal framework, recognizing that in a country at war, treason has immediate and direct consequences on the lives of combatants and civilians. This exceptional jurisdiction is consistent with international practices in armed conflict.

The trial was held before the Shevchenkivskyi District Court of Kyiv — an ordinary civil court, not a military tribunal. That institutional choice underscores that Ukraine insists on maintaining the functioning of its civil judicial institutions even in wartime — an important indicator of the country's democratic resilience.

The ghost operation: how the SBU traps its own traitors

Infiltration techniques turned against the internal enemy

The arrest of Colonel Koziura following a meticulously planned counter-intelligence operation illustrates the growing sophistication of the Security Service of Ukraine (SBU) in managing internal threats. Intelligence agencies that discover a mole in their ranks face a classic dilemma: arrest immediately to limit damage, or let the operation run to trace the networks and maximize information obtained. The SBU chose the second option — a decision that requires nerves of steel and absolute confidence in the security of the counter-operation.

The ghost operation technique — feeding the mole carefully crafted false information designed to be credible while remaining traceable — is a counter-intelligence classic. But executing it successfully against an experienced colonel who knows perfectly the procedures and warning signs of a counter-operation is a considerable technical and psychological achievement. It involves not only controlling information shared with the target, but also managing the emotional and behavioral reactions of an entire team that must behave normally while knowing that one of their own is a traitor.

What the Koziura case reveals about the vulnerability of intelligence services

The Koziura case is a reminder of an uncomfortable truth: no intelligence service is completely impermeable to infiltration. Successful mole recruitments — using ideology, financial lure, blackmail or emotional manipulation — are a permanent reality in the intelligence world. This is not a failure specific to the SBU: the most sophisticated Western agencies have experienced comparable betrayals.

What distinguishes a resilient agency from a vulnerable one is its ability to detect the compromise and manage it effectively once discovered. The Koziura case suggests that the SBU has developed, under the pressure of war, more robust internal detection mechanisms than before 2022. Organizational paranoia — maintained at a functional level — is in this context an institutional virtue.

Treason in wartime: a crime of particular gravity

Why life imprisonment for an intelligence officer

The life sentence for Colonel Koziura may surprise in a country whose legal system adheres to European human rights standards. But it is consistent with the specific gravity of treason in wartime. When a senior intelligence officer passes information to the enemy during an armed conflict, the consequences can be directly lethal: compromised operations, exposed agents, civilians targeted based on stolen intelligence.

Ukrainian courts have clearly chosen to treat this type of treason with the maximum firmness allowed by law. That firmness has a deterrent function: it sends a signal to any officer tempted by collaboration that the personal cost will be maximum and irreversible. In a context where Russia invests massively in recruiting sources within Ukrainian institutions — military, security, administrative — this deterrence is a component of national defense.

The impact on institutional trust within the SBU

Every discovered mole case creates a period of heightened institutional mistrust — reinforced verification procedures, restricted access to sensitive information, security audits. These measures are necessary but costly in terms of operational efficiency. The internal investigations that follow a revelation like the Koziura case absorb precious resources for months.

But the cost of not reacting — allowing lax security practices to create other vulnerabilities — would be far higher. The SBU has chosen the painful but healthy path: handling the case with public transparency (within the limits of national security), exemplary punishment, and implementing the necessary hardening measures. That is the correct institutional response to a compromise — difficult in the short term, necessary in the long term.

The challenges of internal security in a state at war

The systemic vulnerability of Ukrainian institutions

The Koziura case is not an isolated incident in the Ukrainian security landscape. Since 2022, several officials from the SBU, Defense, the Presidential Administration and other institutions have been arrested and prosecuted for collaboration with Russian forces. These cases reveal the depth of Russian penetration into Ukrainian institutions — a legacy of decades of FSB and GRU influence in the Ukrainian state apparatus since independence.

This penetration is no surprise to intelligence specialists. Russian services invested massively in recruiting sources within Ukrainian institutions for decades, exploiting historical, cultural and economic ties between the two countries. The war has accelerated the detection and elimination of these networks — under the pressure of operational necessity — but has not been able to eliminate them entirely. Each arrest reveals the existence of networks but cannot guarantee their complete eradication.

SBU reform: a permanent construction site

Since 2022, the SBU has undertaken a deep reform of its internal security procedures, personnel verification practices and information compartmentalization protocols. These reforms — carried out under SBU chief Vasyl Maliuk since 2023 — aimed to break with Soviet-era practices and build an agency whose security culture is closer to NATO standards than post-Soviet practices.

That construction site is permanent and will never be entirely finished. A perfectly infiltration-proof intelligence agency does not exist. But an agency that continuously improves its practices, detects compromises more quickly, and manages betrayals more effectively — that is an achievable goal. The Koziura case and its resolution — the detection, the ghost operation, the trial and the conviction — suggest that the SBU is progressing in that direction.

Conclusion: treason defeated, vigilance required

A counter-intelligence victory, not the end of the threat

The conviction of Colonel Koziura is a significant victory for Ukrainian counter-intelligence. It closes the file on a particularly serious case of high-level penetration of the security services. But it does not end the threat. The FSB continues to seek to recruit agents in Ukraine — a reality the war has intensified, not diminished. Every official, every officer, every defense engineer is a potential target.

Operation "Rat" showed that the SBU is capable of detecting these agents and turning them with sophistication. But it also revealed that individuals like Koziura — highly placed, experienced, thoroughly familiar with the systems they are betraying — can operate for years before being neutralized. Permanent vigilance remains the only possible answer.

The human cost of treason

Behind the trial, the decrees, the verdicts, there is a reality that legal language cannot entirely cover: Koziura's betrayal likely cost lives. The information he transmitted — on infrastructure, defenses, individuals — was used to target strikes, to identify operations to counter, to compromise individuals. Those lives lost are not named in the judgment. But they are present, in the watermark, behind every line of the indictment.

Koziura's life sentence is the recognition of that price. Ruslan Kravchenko said that "the only appropriate sentence" was the most severe. I share that view — not out of a desire for vengeance, but out of recognition that certain acts have consequences so vast that the judicial response must be commensurate with them.

By Maxime Marquette, columnist

Columnist's transparency note

Sources and limits of the narrative

This narrative is based on the declarations of Ukrainian Prosecutor General Ruslan Kravchenko, reported by the Kyiv Independent, and on secondary sources covering the context of Russian espionage in Ukraine. I do not have access to trial documents nor to the operational details of Operation "Rat." My account of the operation's modalities is based on available public information, which is necessarily incomplete.

Quotes attributed to Kravchenko are drawn directly from the primary source, the Kyiv Independent. I could not verify them against other independent sources, but the Kyiv Independent is a reliable publication whose journalism is internationally recognized.

Assumed position and limits

I am pro-Ukrainian and consider Koziura's betrayal a serious crime meriting a severe response. This position may influence my treatment of the judgment, which I present as justified and consistent. A human rights advocate concerned about the conditions of a martial law trial might have a different reading. I acknowledge that limit but maintain my analysis.

I do not know with certainty to what extent the information transmitted by Koziura directly caused Ukrainian casualties. That is a reasoned inference, not a fact established by available sources.

Sources

Primary sources

Kyiv Independent — Former SBU counter-terrorism chief sentenced to life in prison for passing state secrets to Russia — June 25, 2026

Euromaidan Press — Ukraine arrests eight people accused of cheering on Russian strikes from inside the country and spying — June 23, 2026

Secondary sources

Euromaidan Press — Russo-Ukrainian war, day 1581 — June 24, 2026

Ukrainska Pravda — Russian attack in Zaporizhzhia: one killed, 15 injured including two children — June 28, 2026

Euromaidan Press — Russia's former soldiers may face a locked EU border — if France and Italy stop balking — June 26, 2026

Euromaidan Press — Ukrainian missiles strike Volgograd arms plant making Iskander components — June 27, 2026